summaryrefslogtreecommitdiffstats
path: root/base
Commit message (Collapse)AuthorAgeFilesLines
...
* Added TPS UI skeleton.Endi S. Dewata2013-12-0622-6/+1079
| | | | | | | An inititial implementation of TPS UI has been added. The UI will display TPS resources as tables. Ticket #654
* Added option to build without server packages.Endi S. Dewata2013-12-061-14/+15
| | | | | The build scripts have been modified to accept an optional parameter to build pki-core without the server packages.
* Added Backbone library.Endi S. Dewata2013-12-053-0/+2883
| | | | | | | The Backbone library and its dependency (Underscore) have been added to the common web application. Ticket #654
* Updated jQuery library.Endi S. Dewata2013-12-056-18/+10268
| | | | | | | The jQuery library its internationalization plugin have been replaced with the development version. Ticket #654
* Moved cmsbundle into server folder.Endi S. Dewata2013-12-057-30/+34
| | | | | The pki-cmsbundle.jar is distributed in pki-server package so the files have been moved into the base/server folder.
* Added ACL for selftests.Endi S. Dewata2013-12-0513-0/+65
| | | | | | | New ACL has been added to allow only the administrators in each subsystem to access the selftests. Ticket #652
* Add migration scripts to fix registry file and ownershipAde Lee2013-11-203-8/+121
| | | | | | | | | | | | Migration scripts have been added to update the registry file for tomcat instances to use PKI_INSTANCE_NAME instead of PKI_INSTANCE_ID. File ownershipof the registry file and log files is also fixed. Also removed unused lock file logic in operations startup script. This is for migration from 10.0 -> 10.1 Ticket 805
* Replaced auth.properties with acl.properties.Endi S. Dewata2013-11-2018-66/+182
| | | | | | | | | | | | | | The ACL mapping files have been renamed from auth.properties to acl.properties to match the actual content and moved into the subsystem conf folder. The authentication method mapping files have been extracted from the interceptor into actual files. The ACLInterceptor and AuthMethodInterceptors have been modified to read the default mapping first, then overwrite it with custom mapping if it exists in the subsystem folder. The UpdateAuthzProperties upgrade script has been replaced with RemoveAuthProperties that will remove the old auth.properties.
* Fixed return code on non-existent and duplicate entries.Endi S. Dewata2013-11-195-1/+59
| | | | | | | | Some TPS services have been fixed to return ResourceNotFoundException and ConflictingOperationException on non-existent entries and duplicate entries, respectively. Ticket #749
* Added ACL for TPS profile mapping.Endi S. Dewata2013-11-196-2/+29
| | | | | | | New ACL has been added to allow only the administrators to access TPS profile mappings. Ticket #652
* Updated pki CLI man page.Endi S. Dewata2013-11-193-20/+39
| | | | | The man page for pki CLI has been updated to include the commands for managing the client security database.
* Fixed client-cert-import command.Endi S. Dewata2013-11-192-10/+47
| | | | | | | | | | | | Previously client-cert-import uses a JSS method that calls NSS function PK11_ImportDERCertForKey(). To import certificate without key it should use PK11_ImportCert but it's only available via certutil. So for now the client-cert-import has been modified to call certutil until the interface is added to JSS. The MainCLI has been modified not to call CryptoManager.initialize() to avoid locking up the security database while importing the certificate using certutil.
* Fix useradd command in pkispawn to not create avcAde Lee2013-11-191-2/+4
| | | | Ticket 803
* REST interface extensionAndrew Wnuk2013-11-186-7/+237
| | | | | | This patch provides REST interface extension allowing recovery of asymmetric keys. Ticket #439.
* Fixed problem with key-find.Endi S. Dewata2013-11-153-3/+3
| | | | | | The key-find command did not return any results due to recent changes. The method name in KeyDataInfos has been fixed such that XML mapping would work properly.
* Added client-init command.Endi S. Dewata2013-11-156-91/+192
| | | | | A new CLI command has been added to simplify the creation of client certificate database.
* Updated ACL and auth method mapping names.Endi S. Dewata2013-11-1515-67/+73
| | | | | The ACL and auth method mapping names in some resources have been modified to be more consistent with those in other resources.
* Added ACL for TPS selftests.Endi S. Dewata2013-11-145-0/+23
| | | | | | | New ACL has been added to allow only the administrators to access TPS selftests. Ticket #652
* Added ACL for TPS connections.Endi S. Dewata2013-11-145-0/+27
| | | | | | | New ACL has been added to allow only the administrators to access TPS connections. Ticket #652
* Added ACL for TPS configuration.Endi S. Dewata2013-11-145-0/+23
| | | | | | | New ACL has been added to allow only the administrators to access TPS configuration. Ticket #652
* Added ACL for TPS authenticators.Endi S. Dewata2013-11-1410-17/+58
| | | | | | | | | | New ACL has been added to allow only the administrators to access TPS authenticators. The set of interceptors in each application has been modified to preserve the order. Ticket #652
* Fixed CLI command parsing.Endi S. Dewata2013-11-142-13/+38
| | | | | | | | The CLI command parsing has been fixed such that it consumes all parts of the commands. If there's unprocessed component it means it is an invalid command. Ticket #787
* Added paging on all find commands.Endi S. Dewata2013-11-1446-604/+420
| | | | | | The find commands in some REST services have been modified to support paging to be consistent with others. The other find commands have been cleaned up as well.
* Added more null parameter checking.Endi S. Dewata2013-11-145-1/+50
| | | | | | | Some REST methods have been modified to check for null parameters and return the proper error code. Ticket #749
* Added null parameter checking.Endi S. Dewata2013-11-109-0/+90
| | | | | | | Some REST services have been modified to throw BadRequestException on null parameters. Ticket #749
* Fixed find commands.Endi S. Dewata2013-11-0835-244/+266
| | | | | | | | | | | Some of the REST services have been fixed to consistently return a DataCollection which contains the total count, the requested subset of results, and links to request other subsets of the results. The TPSConnectorFindCLI has been split into separate find and show commands. Ticket #749
* Fixed database cleanup issues.Endi S. Dewata2013-11-082-228/+207
| | | | | | | | | The configuration code has been modified not to remove the LDAP database folder since it may not have access to it. It will also not continue with the cleanup if the database is used by another subtree. Manual removal of old entries in the subtree is redundant so the code has been removed. The exception handling has been improved as well.
* Revert to allowing security managerAde Lee2013-11-071-1/+1
| | | | | | | Bug in tomcat for security manager has been resolved. Updated tomcat requirement accordingly. Ticket 774
* Fixed return code for user and group services.Endi S. Dewata2013-11-0713-225/+165
| | | | | | | | | The user and group services have been modified to return consistent HTTP return codes under various situations. The UGSubsystem has been modified to capture any LDAP exceptions and throw the proper PKIException subclass that represents the appropriate HTTP error code for the situation. Ticket #669, #749
* Added checks for CertRequest and Cert ResourcesAde Lee2013-11-074-35/+79
| | | | Ticket 749
* Fix KeyRequest and Key Resources to return correct exit codesAde Lee2013-11-065-18/+72
| | | | Also added some missing checks, and some missing options in the Key Request CLI
* Fix return values in ProfileResourceAde Lee2013-11-061-8/+49
| | | | Ticket 749
* Modify profile resource to return correct response for create or modify opAde Lee2013-11-066-14/+69
| | | | Ticket 749
* Fix tpsclient failureMatthew Harmsen2013-11-051-1/+7
| | | | * TRAC Ticket #760 - Tpsclient Failure on F20 and TPS
* Renamed CLI commands.Endi S. Dewata2013-11-055-40/+39
| | | | | | | | | | | | | | | | | | The following commands have been renamed. The old commands will no longer work. * profile -> ca-profile * kraconnector -> ca-kraconnector The following commands have also been renamed, but the old commands will continue to work: * cert -> ca-cert * key -> kra-key The user and group commands have already been renamed to <subsytem>- user and <subsystem>-group. The old commands will continue to work and will use CA subsystem by default. Ticket #701
* Added TPS profile resource.Endi S. Dewata2013-11-0425-21/+1578
| | | | | | | A new REST service and clients have been added to manage the profiles in the TPS configuration file. Ticket #652
* Removed duplicate ACL classes.Endi S. Dewata2013-11-014-466/+30
| | | | | | | The ACL and ACLEntry in com.netscape.cmscore.realm are duplicates of the ones in com.netscape.certsrv.acls. They have been removed since they are no longer used. All differences have been merged into the remaining copy.
* Renamed CLI commands.Endi S. Dewata2013-11-015-7/+7
| | | | | | | | The following commands have been renamed for consistency: * client-cert-remove -> client-cert->del * group-member-remove -> group-member-del * user-cert-remove -> user-cert-del * user-membership-remove -> user-membership-del
* Fixed problem running GroupMemberProcessor on non-CA.Endi S. Dewata2013-11-015-69/+98
| | | | | | | | Previously the GroupMemberProcessor class inherits from CAProcessor that can only run on CA. To fix the problem a generic Processor has been created as a super class of the CAProcessor and some of the fields and methods that are not CA-specific have been moved into the super class. The GroupMemberProcessor will now inherit directly from the super class.
* Renamed Processor to CAProcessor.Endi S. Dewata2013-11-019-21/+21
| | | | | | The Processor class depends on CertificateAuthority subsystem which only exists on CA, so the class has been renamed to CAProcessor to reflect the dependency.
* Added mechanism to deprecate CLI commands.Endi S. Dewata2013-11-011-2/+39
| | | | | The CLI framework has been modified to support deprecating CLI commands by adding @Deprecated to the class name.
* Backup upgrade tracker.Endi S. Dewata2013-10-313-3/+12
| | | | | | | | | The upgrade framework has been modified to backup the files used to track the upgrade progress. If the tracker file is also modified by the upgrade scriptlet, it will only keep the initial backup (before any modifications were made). Ticket #763
* Modify output file option for cert-request-review command.Abhishek Koneru2013-10-312-44/+18
| | | | | | | | Change the --output option to --file for providing a file to store the certificate request to be reviewed using the cert-request-review cli command. Update the man page entry for the same. Ticket #674
* Fixed tests dependencies.Endi S. Dewata2013-10-3125-35/+48
| | | | | The test classes have been moved from base/common/test to base/server/test and into the cmscore package because they are dependent on server classes.
* Fixed logic for setting admin cert signing algorithmAde Lee2013-10-313-45/+81
| | | | | Should now be SHA256 by default. Bugzilla BZ 1024445
* Fixed errors during Tomcat shutdown.Endi S. Dewata2013-10-283-16/+20
| | | | | | | | | Previously the CMS.shutdown() was called multiple times during Tomcat shutdown, one by CMSStarServlet.destroy() and the other by the shutdown hook, causing some errors. The shutdown hook should only be used in a standalone application, so it has been moved into CMS.main(). Bugzilla #1018628
* Fixed error handling in DoUnrevoke servlet.Endi S. Dewata2013-10-281-2/+3
| | | | | | | The DoUnrevoke servlet has been modified to re-throw the EBaseException such that the error message can be returned properly to the client. Ticket #739
* Added access control for TPS token.Endi S. Dewata2013-10-285-11/+40
| | | | | | | The TPS token REST interface has been modified to require client certificate authentication. TPS admins, agents, and operators are allowed to view tokens, but only admins are allowed to add and remove tokens, and only agents are allowed to modify tokens.
* Cleaned up CertEnrollmentRequest.Endi S. Dewata2013-10-2512-162/+270
| | | | | The CertEnrollmentRequest, ProfileInput, ProfileAttribute, and Descriptor have been cleaned up to fix some bugs and minor formatting issues.
* Reorganized server packages.Endi S. Dewata2013-10-25653-142/+505
| | | | | The tomcat, cms, and cmscore packages have been moved from base/common into separate folders in base/server so that they can be built separately.
generated by cgit (git 2.34.1) at 2025-10-04 01:03:37 +0000